Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iRVtsE0pLiKL2PeIZ3Bb8BwFQHw.roa
File: iRVtsE0pLiKL2PeIZ3Bb8BwFQHw.roa (raw, json)
Hash identifier: 55H7bjfU316ScFSx2HQPCgmKHLF+d4YfwVw+RYGCHNg=
Subject key identifier: 89:15:6D:B0:4D:29:2E:22:8B:D8:F7:88:67:70:5B:F0:1C:05:40:7C
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368C6D7B8DA007718A88D0601647AD5
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iRVtsE0pLiKL2PeIZ3Bb8BwFQHw.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63902
IP address blocks: 89.28.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c6:d7:b8:da:00:77:18:a8:8d:06:01:64:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89156db04d292e228bd8f78867705bf01c05407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:75:dc:3e:72:f6:80:fd:f2:6d:0f:50:0f:
4c:e1:62:3c:68:cc:07:c0:48:db:8d:ee:a7:ea:64:
25:6c:30:37:c5:36:df:b6:33:52:13:ec:c1:c3:4e:
01:cf:a9:6d:c1:8a:6a:5b:ba:2c:3d:7b:79:65:da:
20:fc:7a:03:10:b8:c6:44:68:fb:16:b7:0a:82:32:
b0:f1:fd:ee:30:c4:e8:f2:f6:e5:a6:1f:98:6b:23:
a1:45:06:4d:7e:84:f0:83:6f:79:4b:4b:c9:03:be:
48:be:23:2d:60:68:ff:68:79:b4:76:cb:9f:7b:99:
24:05:2c:06:fc:2b:3d:0f:b8:7c:76:03:59:ab:ec:
df:45:65:8b:30:68:c2:9d:c9:82:0c:82:18:d1:ae:
fb:68:82:65:f3:4e:a0:dd:75:ae:db:0a:80:fb:6f:
ac:99:dd:7d:b6:8c:86:51:b1:20:17:e1:f8:83:2b:
2d:22:af:3d:e9:a5:65:53:3d:b4:3f:ab:4e:c6:bd:
4c:c5:00:1c:e1:31:a3:cc:37:72:5f:86:13:1c:c1:
2e:ed:a5:19:fc:f0:ce:46:52:ef:23:19:b0:72:67:
75:8e:55:4f:fb:ec:6c:13:59:80:c3:8f:06:ec:1a:
bd:5e:60:97:ca:37:37:8a:13:da:ab:76:5b:b4:45:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:15:6D:B0:4D:29:2E:22:8B:D8:F7:88:67:70:5B:F0:1C:05:40:7C
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/iRVtsE0pLiKL2PeIZ3Bb8BwFQHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:26:d0:04:86:b0:ec:68:16:e0:bf:26:d5:3e:07:c1:41:4e:
f6:14:6c:e9:3a:00:dd:04:ec:1c:28:1f:39:86:d1:89:05:a7:
c0:f4:7a:3e:43:88:0f:c6:75:be:ad:50:f0:88:0d:c5:02:5c:
c9:68:12:08:3e:80:d1:11:ec:f3:3e:65:f5:e4:80:ac:4d:ec:
91:56:e8:3b:98:b5:ad:e3:d8:1d:f7:ab:39:51:a1:b5:03:2c:
85:d3:4f:29:f2:f2:9b:ac:9e:c2:55:7a:93:b7:fa:f0:a8:5c:
a6:cd:f4:82:22:ef:06:0f:d6:06:bc:f2:8d:70:26:38:da:a2:
bb:09:ab:c3:e6:3f:91:37:9c:3b:60:80:e0:64:be:3d:7e:0c:
bc:75:59:f2:97:9e:39:1c:ee:27:4e:38:39:6d:ed:a4:fa:30:
1c:26:17:1c:10:88:5c:48:3e:6e:11:8a:4f:09:3a:09:ca:14:
a2:2f:52:36:47:83:92:a6:25:2e:2e:d8:9d:96:aa:d1:58:4c:
c9:04:bc:1b:20:65:2d:fa:19:0d:fa:c2:a6:2e:ce:ab:09:40:
21:25:d9:45:a8:16:d0:2a:7a:b1:f8:c0:5f:73:73:db:21:a4:
73:1b:6c:86:6a:e7:7f:8e:cb:7d:5f:a6:7f:5d:95:45:8e:34:
e9:46:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:01 2026 by rpki-client